CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8d16a493b08b1b46a6a5ae0a5ca86c29_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8d16a493b08b1b46a6a5ae0a5ca86c29_JaffaCakes118
Size
100KB
MD5
8d16a493b08b1b46a6a5ae0a5ca86c29
SHA1
6e180e1d5b01e8bb494e2583c7d6b853b24e9246
SHA256
3be645be2d382012c13c9be52dd90c61ac1eecec34a249926040c73207a1d88b
SHA512
3ca746ad8811a16b58cf0e314d8510d08c225350814326b3a67bc881cd39c56381bb46441ea22b45454a91f4275d0ef9fa1fbb5e0f2a292eba792a66857601b8
SSDEEP
1536:SAVJ0mWeB/iU9kpDq9LYduIkInjeQ8muv/7t9xOsdqEbQSWF4:zJ0mW8/ilpGLeuIz58DjfxOSq0T
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8d16a493b08b1b46a6a5ae0a5ca86c29_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE